re-use ipsets where they are identical